InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
CFPB reports on Section 1033 rulemaking
The CFPB recently released a final report issued by the Small Business Review Panel (Panel), which examines the impact of the Bureau’s proposals to address consumers’ personal financial data rights. Section 1033 of Dodd-Frank generally provides that covered entities, such as banks, must make available to consumers, upon request, transaction data and other information concerning consumer financial products or services that the consumer obtains from the covered entity. Over the past several years, the Bureau has engaged in a series of rulemaking steps to prescribe standards for this requirement, including the release of a 71-page outline of proposals and alternatives in advance of convening a panel under the Small Business Regulatory Enforcement Fairness Act. The outline presents items under consideration that “would specify rules requiring certain covered persons that are data providers to make consumer financial information available to a consumer directly and to those third parties the consumer authorizes to access such information on the consumer’s behalf, such as a data aggregator or data recipient (authorized third parties).” (Covered by InfoBytes here.)
While the Panel’s final report reflects its review of the Bureau’s proposals and the feedback received from small entity representatives that likely would be subject to the rule, it may not reflect updated findings uncovered during the process of producing a notice of proposed rulemaking because the report is drafted at the preliminary stage of the Bureau’s required rulemaking process.
The report includes an overview of proposals and alternatives under consideration for the use of two existing definitions to establish data provider coverage: “financial institution” as defined by Regulation E (i.e. “depository and nondepository financial institutions that provide consumer funds-holding accounts or that otherwise meet the Regulation E definition of financial institution”), and “card issuer” as defined by Regulation Z (i.e. “depository and nondepository institutions that provide credit cards or otherwise meet the Regulation Z definition of card issuer”). Entities that meet the definition of a “card issuer” would include both the person that issues a credit card and the person’s agents with respect to the card.
The report analyzes numerous topics, including proposals covering asset accounts and credit card accounts, potential exemptions for certain covered data providers, the process for making information available to consumers and to third parties (including third-party commitments to data security, data accuracy and limitations, and disclosure compliance), record retention obligations, and the potential impact on small entities. The report includes a thorough breakdown of panel findings and recommendations.
CFPB releases regulatory agenda
Recently, the Office of Information and Regulatory Affairs released the CFPB’s fall 2022 regulatory agenda. Key rulemaking initiatives that the agency expects to initiate or continue include:
- Overdraft and NSF fees. The Bureau is considering whether to engage in pre-rulemaking activity in November to amend Regulation Z with respect to special rules for determining whether overdraft fees are considered finance charges. According to the Bureau, the rules, which were created when Regulation Z was adopted in 1969, have remained largely unchanged despite the fact that the nature of overdraft services has significantly changed over the years. The Bureau is also considering whether to engage in pre-rulemaking activity in November regarding non-sufficient fund (NSF) fees. The Bureau commented that while NSF fees have been a significant source of fee revenue for depository institutions, recently some institutions have voluntarily stopped charging such fees.
- FCRA rulemaking. The Bureau is considering whether to engage in pre-rulemaking activity in November to amend Regulation V, which implements the FCRA. As previously covered by InfoBytes, on January 3, the Bureau issued its annual report covering information gathered by the Bureau regarding certain consumer complaints on the three largest nationwide consumer reporting agencies (CRAs). CFPB Director Rohit Chopra noted that the Bureau “will be exploring new rules to ensure that [the CRAs] are following the law, rather than cutting corners to fuel their profit model.”
- Section 1033 rulemaking. Section 1033 of Dodd-Frank provides that covered entities, such as banks, must make available to consumers, upon request, transaction data and other information concerning consumer financial products or services that the consumer obtains from the covered entity. Over the past several years, the Bureau has engaged in a series of rulemaking steps to prescribe standards for this requirement, including the release of a 71-page outline of proposals and alternatives in advance of convening a panel under the Small Business Regulatory Enforcement Fairness Act (SBREFA). The outline presents items under consideration that “would specify rules requiring certain covered persons that are data providers to make consumer financial information available to a consumer directly and to those third parties the consumer authorizes to access such information on the consumer’s behalf, such as a data aggregator or data recipient (authorized third parties).” (Covered by InfoBytes here.) The Bureau anticipates issuing a SBREFA report in February.
- Amendments to FIRREA concerning automated valuation models. The Bureau is participating in interagency rulemaking with the Fed, OCC, FDIC, NCUA, and FHFA to develop regulations to implement the amendments made by Dodd-Frank to FIRREA concerning appraisal automated valuation models (AVMs). The FIRREA amendments require implementing regulations for quality control standards for AVMs. The Bureau released a SBREFA outline and report in February and May 2022 respectively (covered by InfoBytes here), and estimates that the agencies will issue a notice of proposed rulemaking (NPRM) in March.
- Property Assessed Clean Energy (PACE) financing. The Bureau issued an advance notice of proposed rulemaking (ANPRM) in March 2019 to extend TILA’s ability-to-repay requirements to PACE transactions. (Covered by InfoBytes here.) The Bureau is working to develop a proposed rule to implement Economic Growth, Regulatory Relief, and Consumer Protection Act Section 307 in April.
- Nonbank registration. The Bureau issued an NPRM in December to enhance market monitoring and risk-based supervision efforts by including all final public written orders and judgments (including any consent and stipulated orders and judgments) obtained or issued by any federal, state, or local government agency for violation of certain consumer protection laws related to unfair, deceptive, or abusive acts or practices in a database of enforcement actions taken against certain nonbank covered entities. (Covered by InfoBytes here.) In a separate agenda item, the Bureau states that the NPRM would also require supervised nonbanks to register with the Bureau and provide information about their use of certain terms and conditions in standard-form contracts. The Bureau proposes “to collect information on standard terms used in contracts that are not subject to negotiating or that are not prominently advertised in marketing.”
- Credit card penalty fees. The Bureau issued an ANPRM last June to solicit information from credit card issuers, consumer groups, and the public regarding credit card late fees and late payments, and card issuers’ revenue and expenses. (Covered by InfoBytes here.) Under the CARD Act rules inherited by the Bureau from the Fed, credit card late fees must be “reasonable and proportional” to the costs incurred by the issuer as a result of a late payment. Calling the current credit card late fees “excessive,” the Bureau stated it intends to review the “immunity provision” to understand how banks that rely on this safe harbor set their fees and to examine whether banks are escaping enforcement scrutiny “if they set fees at a particular level, even if the fees were not necessary to deter a late payment and generated excess profits.” The Bureau is considering comments received on the ANPRM as it develops an NPRM that may be released this month.
- Small business rulemaking. Section 1071 of Dodd-Frank amended ECOA to require financial institutions to report information concerning credit applications made by women-owned, minority-owned, and small businesses, and directed the Bureau to promulgate rules for this reporting. An NPRM was issued in August 2021 (covered by InfoBytes here). The Bureau anticipates issuing a final rule later this month.
CFPB publishes rulemaking agenda
Recently, the Office of Information and Regulatory Affairs released the CFPB’s spring 2022 rulemaking agenda. According to the preamble, the information in the agenda is current as of April 1, 2022 and identifies regulatory matters that the Bureau “reasonably anticipates having under consideration during the period from June 1, 2022 to May 31, 2023.”
Key rulemaking initiatives include:
- Consumer Access to Financial Records. The Bureau notes that it is considering rulemaking to implement section 1033 of the Dodd-Frank Act to address the development and use of standardized formats for information made available to consumers. The Bureau will release materials in advance of convening a panel under the Small Business Regulatory Enforcement Fairness Act (SBREFA), in conjunction with the Office of Management and Budget and the Small Business Administration’s Chief Counsel for Advocacy.
- Amendments to FIRREA Concerning Automated Valuation Models. The Bureau is participating in interagency rulemaking with the Fed, OCC, FDIC, NCUA, and FHFA to develop regulations to implement the amendments made by the Dodd-Frank Act to FIRREA concerning appraisal automated valuation models (AVMs). The FIRREA amendments require implementing regulations for quality control standards for AVMs. The Bureau released a SBREFA outline in February 2022 and estimates in the agenda that the agencies will issue an NPRM in December 2022 (covered by InfoBytes here).
- Property Assessed Clean Energy Financing. The Bureau issued an ANPR in March 2019 to extend TILA’s ability-to-repay requirements to PACE transactions (covered by InfoBytes here). The Bureau is working to develop a proposed rule to implement Economic Growth, Regulatory Relief, and Consumer Protection Act section 307 in May 2023.
- Small Business Lending Data Collection Under the Equal Credit Opportunity Act. Section 1071 of the Dodd-Frank Act amended ECOA to require financial institutions to report information concerning credit applications made by women-owned, minority-owned, and small businesses, and directed the Bureau to promulgate rules for this reporting. The Bureau issued an NPRM in August 2021, and the comment period ended January 6 (covered by InfoBytes here). The agenda indicates that the Bureau estimates issuance of a final rule in March 2023.
- Adverse Information in Cases of Human Trafficking Under the Debt Bondage Repair Act. The National Defense Authorization Act amended the FCRA to prohibit consumer reporting agencies from providing reports containing any adverse items of information resulting from human trafficking. In June 2022, the CFPB issued a final rule implementing amendments to the FCRA intended to assist victims of human trafficking (covered by InfoBytes here).
CFPB reviewing 2,100 comments on small business data collection
On February 22, the CFPB filed its eighth status report in the U.S. District Court for the Northern District of California, as required under a stipulated settlement reached in February 2020 with a group of plaintiffs, including the California Reinvestment Coalition, related to the collection of small business lending data. The settlement (covered by InfoBytes here) resolved a 2019 lawsuit that sought an order compelling the Bureau to issue a final rule implementing Section 1071 of the Dodd-Frank Act, which requires the Bureau to collect and disclose data on lending to women and minority-owned small businesses. The current status report states that the Bureau has met the deadlines under the stipulated settlement, which included issuing its long-awaited proposed rule (NPRM) last September. As covered by a Buckley Special Alert, the NPRM would require a broad swath of lenders to collect small business loan data, including information about the loans themselves, borrower characteristics, and demographic information regarding the borrower’s principal owners. This information would be reported annually to the Bureau and published by the Bureau on its website. The Bureau notes in its status report that the NPRM’s comment period ended on January 6. The Bureau is currently reviewing approximately 2,100 comments submitted via the public docket and will confer with plaintiffs regarding an appropriate deadline for issuing a final rule.
Find continuing Section 1071 coverage here.
CFPB to issue Section 1071 NPRM by September 30
On August 23, the CFPB filed its sixth status report in the U.S. District Court for the Northern District of California as required under a stipulated settlement reached in February 2020 with a group of plaintiffs, including the California Reinvestment Coalition. The settlement (covered by InfoBytes here) resolved a 2019 lawsuit that sought an order compelling the Bureau to issue a final rule implementing Section 1071 of the Dodd-Frank Act, which requires the Bureau to collect and disclose data on lending to women and minority-owned small businesses. The newest status report follows a July court order, which requires the Bureau to issue a notice of proposed rulemaking on small business lending data by September 30 (covered by InfoBytes here). Among other things, the Bureau notes in its status report that it expects to meet the September deadline and that it “is continuing to work on the significant legal and policy issues that must be resolved to implement the Section 1071 regulations.”
Find continuing Section 1071 coverage here.
CFPB publishes rulemaking agenda
On June 11, the Office of Information and Regulatory Affairs released the CFPB’s spring 2021 rulemaking agenda. According to a Bureau announcement, the information released represents regulatory matters the Bureau is “currently pursuing under interim leadership pending the appointment and confirmation of a permanent Director.” Any changes made by the new permanent director will be reflected in the fall 2021 rulemaking agenda. Additionally, the Bureau indicates that it plans to continue to focus resources on actions addressing the adverse impacts to consumers due to the ongoing Covid-19 pandemic, and highlighted an interim final rule issued in April that addresses certain debt collector conduct associated with the CDC’s temporary eviction moratorium order (covered by InfoBytes here). The Bureau will also continue to take concrete steps toward furthering the agency’s “commitment to promoting racial and economic equity.”
Key rulemaking initiatives include:
- Small Business Rulemaking. Last September, the Bureau released a Small Business Regulatory Enforcement Fairness Act of 1996 (SBREFA) outline of proposals under consideration, convened an SBREFA panel last October, and released the panel’s final report last December (covered by InfoBytes here and here). The Bureau reports that it anticipates releasing a notice of proposed rulemaking (NPRM) for the Section 1071 regulations this September to “facilitate enforcement of fair lending laws as well as enable communities, governmental entities, and creditors to identify business and community development needs and opportunities of women-owned, minority-owned, and small businesses.”
- Consumer Access to Financial Records. The Bureau notes that it is considering rulemaking to implement section 1033 of Dodd-Frank in order to address the availability of electronic consumer financial account data. The Bureau is currently reviewing comments received in response to an Advance Notice of Proposed Rulemaking (ANPR) issued last fall regarding consumer data access (covered by InfoBytes here).
- Property Assessed Clean Energy (PACE) Financing. As previously covered by InfoBytes, the Bureau published an ANPR in March 2019 seeking feedback on the unique features of PACE financing and the general implications of regulating PACE financing under TILA. The Bureau notes that it continues “to engage with stakeholders and collect information for the rulemaking, including by pursuing quantitative data on the effect of PACE on consumers’ financial outcomes.”
- Automated Valuation Models (AVM). Interagency rulemaking is currently being pursued by the Bureau, Federal Reserve Board, OCC, FDIC, NCUA, and FHFA to develop regulations for AVM quality control standards as required by Dodd-Frank amendments to FIRREA. The standards are designed to, among other things, “ensure a high level of confidence in the estimates produced by the valuation models, protect against the manipulation of data, [ ] avoid conflicts of interest, require random sample testing and reviews,” and account for any other appropriate factors. An NPRM is anticipated for December.
- Amendments to Regulation Z to Facilitate LIBOR Transition. As previously covered by InfoBytes, the Bureau issued an NPRM in June 2020 to amend Regulation Z to address the sunset of LIBOR, and to facilitate creditors’ transition away from using LIBOR as an index for variable-rate consumer products. A final rule is expected in January 2022.
- Reviewing Existing Regulations. The Bureau notes in its announcement that while it will conduct an assessment of a rule implementing HMDA (most of which took effect January 2018), it will no longer pursue two HMDA proposed rulemakings previously listed in earlier agendas related to the reporting of HMDA data points and public disclosure of HMDA data. Additionally, the Bureau states that it finished a review of Regulation Z rules implementing the Credit Card Accountability Responsibility and Disclosure Act of 2009 and plans to publish any resulting changes in the fall 2021 agenda.
The Bureau’s announcement also highlights several completed rulemaking items, including (i) a final rule that formally extended the mandatory compliance date of the General Qualified Mortgage final rule to October 1, 2022 (covered by InfoBytes here); (ii) proposed amendments to the mortgage servicing early intervention and loss mitigation-related provisions under RESPA/Regulation X (covered by a Buckley Special Alert) (the Bureau anticipates issuing a final rule before June 30, when the federal foreclosure moratoria are set to expire); and (iii) a proposed rule (covered by InfoBytes here), which would extend the effective date of two final debt collection rules to allow affected parties additional time to comply due to the ongoing Covid-19 pandemic (the Bureau plans to issue a final rule in June on whether, and for how long, it will extend the effective date once it reviews comments).
CFPB updates status on women and minority-owned business data
On May 24, the CFPB filed its fifth status report in the U.S. District Court for the Northern District of California as required under a stipulated settlement reached in February with a group of plaintiffs, including the California Reinvestment Coalition. The settlement (covered by InfoBytes here) resolved a 2019 lawsuit that sought an order compelling the Bureau to issue a final rule implementing Section 1071 of the Dodd-Frank Act, which requires the Bureau to collect and disclose data on lending to women and minority-owned small businesses.
Among other things, the Bureau notes in the status report that it has satisfied the following required deadlines: (i) last September it released a Small Business Regulatory Enforcement Fairness Act of 1996 (SBREFA) outline of proposals under consideration (InfoBytes coverage here); and (ii) it convened an SBREFA panel last October and released the panel’s final report last December (InfoBytes coverage here). The Bureau reports that its rulemaking staff continues to brief new Bureau leadership on significant legal and policy issues that must be resolved in order to prepare a notice of proposed rulemaking for the Section 1071 regulations, and states that the parties have met to discuss an appropriate deadline for issuing the NPRM. According to the status report, should the parties agree on a deadline they “will jointly stipulate to the agreed date and request that the court enter that deadline.”
Find continuing Section 1071 coverage here.
CFPB files Section 1071 status report, evaluates recommendations
On February 22, the CFPB filed its fourth status report in the U.S. District Court for the Northern District of California as required under a stipulated settlement reached in February with a group of plaintiffs, including the California Reinvestment Coalition. The settlement (covered by InfoBytes here) resolved a 2019 lawsuit that sought an order compelling the Bureau to issue a final rule implementing Section 1071 of the Dodd-Frank Act, which requires the Bureau to collect and disclose data on lending to women and minority-owned small businesses.
Among other things, the Bureau notes in the status report that it has satisfied the following required deadlines: (i) last September it released a Small Business Regulatory Enforcement Fairness Act of 1996 (SBREFA) outline of proposals under consideration (InfoBytes coverage here); and (ii) it convened an SBREFA panel last October and released the panel’s final report last December (InfoBytes coverage here). The settlement next requires the parties to confer about a deadline for the Bureau to issue a Section 1071 notice of proposed rulemaking (NPRM). According to the status report, the Bureau’s rulemaking staff is in the process of evaluating the panel’s recommendations as well as stakeholder feedback, and has begun briefing new Bureau leadership “on the significant legal and policy issues that must be resolved to implement the Section 1071 regulations” and prepare the NPRM. The Bureau notes that the parties continue to discuss an appropriate deadline for issuing the NPRM, emphasizing that if the parties agree on a deadline, they “will jointly stipulate to the agreed date and request that the court enter that deadline.” As previously covered by InfoBytes, acting Director Dave Uejio stated recently that he has “pledged” the Bureau’s Division of Research, Markets, and Regulations “the support it needs to implement section 1071 of the Dodd-Frank Act without delay.”
Find continuing Section 1071 coverage here.
CFPB report anticipates data collection on small-business lending
On December 15, the CFPB released a report detailing the results of the panel convened pursuant to the Small Business Regulatory Enforcement Fairness Act (SBREFA), which discussed the Bureau’s pending rulemaking to implement Section 1071 Dodd-Frank Act. Section 1071 requires the Bureau to engage in a rulemaking to collect and disclose data on lending to both women-owned and minority-owned small businesses. In September, the Bureau released a detailed outline describing the proposals under consideration for Section 1071 implementation, including factors such as scope, covered lenders, covered products, data points, and privacy (details covered by InfoBytes here). The October panel was comprised of a representative from the Bureau, the Chief Counsel for Advocacy of the Small Business Administration, and a representative from the Office of Information and Regulatory Affairs in the Office of Management and Budget. The panel consulted with small entity representatives (SERs)—those who would likely be directly affected by the Section 1071 rulemaking—to discuss the economic impacts of compliance with the outline’s proposals, as well as regulatory alternatives to the proposals.
The report includes, among other things, the feedback and recommendations made by the SERs, and the findings and recommendations of the panel. Generally, the SERs were supportive of the proposal with “many expressly support[ing] broad coverage of both financial institutions and products in the 1071 rulemaking.” The SERs backed data transparency and simple regulations but expressed significant concern that the rulemaking would cause smaller financial institutions to “incur disproportionate compliance cost compared to large [financial institutions]” and would ultimately either decrease lending or increase costs for small businesses. The SERs also recommended that the Bureau take into account different types of financial institutions operating in the small business lending market, including non-depository institutions. The report also details specific recommendations by the panel, including that the Bureau issue compliance materials in connection with the rulemaking and consider providing sample disclosure language related to the collection of race, sex, and ethnicity information for principal owners as well as women-owned and minority-owned business status.
CFPB outlines plan to disclose data on small-business lending
On September 15, the CFPB released its “Outline of Proposals Under Consideration and Alternatives Considered” (Outline) for implementing the requirements of Section 1071 of the Dodd-Frank Act, which instructs the Bureau to collect and disclose data on lending to women and minority-owned small businesses. The detailed Outline describes the proposals under consideration and discusses other relevant laws, the regulatory process, and potential economic impacts. The Bureau also released a high-level summary of the Outline. Highlights of the proposals include:
- Scope. The Bureau is considering proposing that the data collection and reporting requirements would apply only to applications for credit by a small business. Financial institutions would not be required to collect and report data for women- and minority-owned businesses that are not considered “small,” as defined by the Small Business Act and the Small Business Administration’s (SBA) implementing regulations.
- Covered Lenders. The Bureau is considering proposing a broad definition of “financial institution” that would apply to a variety of entities engaged in small business lending, but is also considering proposing exemptions based on either a size-based (examples include $100 million or $200 million in assets), or activity-based threshold (examples range from 25 loans or $2.5 million to 100 loans or $10 million), or both.
- Covered Products. The Bureau is considering proposing exemptions from the definition of “credit” to include consumer-designated credit, leases, factoring, trade credit, and merchant cash advances.
- Application. Because an “application” would trigger requirements under Section 1071, the Bureau is considering proposing a definition that is largely consistent with Regulation B; however, the Bureau is also considering “clarifying circumstances,” such as inquiries/prequalifications, that would not be reportable.
- Data Points. The Bureau is considering a range of data points for collection, including, in addition to the mandatory data points required by Section 1071, “discretionary data points” to aid in fulfilling the purposes of Section 1071: “pricing, time in business, North American Industry Classification System (NAICS) code, and number of employees.”
- Privacy. The Bureau is considering using a “balancing test” for public disclosure of the data. Specifically, data “would be modified or deleted if its disclosure in unmodified form would pose risks to privacy interests that are not justified by the benefits of public disclosure.”
Additionally, the Bureau will convene a panel, as required by the Small Business Regulatory Enforcement Fairness Act (SBREFA), in October 2020 to “consult small entities regarding the potential impact of the proposals under consideration.” Feedback on the proposals is due no later than December 14.